Trent Clarke e1be633ac0 Exposes Identity Center accounts as Apps in Unified Resource Cache (#49301) ...

* Exposes Identity Center accounts as Apps in Unified Resource Cache

    For the purposes of the UI, Identity Center accounts and account
    assignments are treated like special Apps. This patch exposes
    Account Assignments to the UI via the Unified Resource Cache.

    Includes:
    - Generating an App resource from an Identity Center Account resource
    - General plumbing from backend through to cache and UI

* lint

2024-12-05 12:23:56 +00:00

..

accessmonitoringrules/accessmonitoringrulesv1

add periodic cleanup for notifications (#40941)

2024-09-20 10:56:41 +00:00

accesspoint

GitHub proxy part 2.5: git_server cache (#49564)

2024-12-05 03:18:50 +00:00

authclient

GitHub proxy part 2.5: git_server cache (#49564)

2024-12-05 03:18:50 +00:00

autoupdate/autoupdatev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

clusterconfig/clusterconfigv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

crownjewel

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

dbobject/dbobjectv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

dbobjectimportrule/dbobjectimportrulev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

discoveryconfig/discoveryconfigv1

Convert some lib/auth subpackages to slog (#47477)

2024-10-11 10:00:37 +00:00

dynamicwindows/dynamicwindowsv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

gitserver/gitserverv1

GitHub Proxy part 2: git_server resource, service, and RBAC (#49393)

2024-11-27 16:12:30 +00:00

integration

GitHub Proxy part 3: gen github user cert and export CA (#49396)

2024-12-03 18:17:21 +00:00

join

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

keygen

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

keystore

GitHub Proxy part 1: github integration resource (#48999)

2024-11-23 20:09:35 +00:00

kubewaitingcontainer/kubewaitingcontainerv1

add periodic cleanup for notifications (#40941)

2024-09-20 10:56:41 +00:00

loginrule/loginrulev1

Unify naming and location of auth RPC services (#46559)

2024-09-12 22:34:58 +00:00

machineid/machineidv1

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

mfatypes

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

migration

Convert some lib/auth subpackages to slog (#47477)

2024-10-11 10:00:37 +00:00

mocku2f

feat: Implement the WebAuthn credProps extension (#45252)

2024-08-15 13:28:19 +00:00

notifications/notificationsv1

Enhance the tctl notifications command (#48829)

2024-11-13 17:24:38 +00:00

okta

Update backend.Key to be its own distinct type (#46701)

2024-10-04 14:02:00 +00:00

presence/presencev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

state

Prevent auth from starting when an incompatible major upgrade is detected (#43520)

2024-07-12 22:01:21 +00:00

storage

Introduce a dedicated backend key type (#45706)

2024-08-22 18:29:42 +00:00

test

…

testauthority

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

touchid

Set min macOS version to 11 (#46461)

2024-10-04 23:31:00 +00:00

trust/trustv1

Clean up code marked for deletion in v17 (#47364)

2024-10-10 15:36:53 +00:00

userloginstate

Logs: Forward the error from the failing case to emitUsageEvent (#49237)

2024-11-19 21:39:41 +00:00

userpreferences/userpreferencesv1

add sticky mode support to sidenav (#48326)

2024-11-13 00:35:50 +00:00

userprovisioning/userprovisioningv2

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

users/usersv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

usertasks/usertasksv1

Fix UsageEvent for UserTaskState changed (#49409)

2024-12-03 09:16:08 +00:00

vnetconfig/vnetconfigv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

webauthn

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

webauthncli

fix: Address flakiness and revisit TestTeleportClient_Login_local (#47406)

2024-10-10 13:18:20 +00:00

webauthntypes

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

webauthnwin

fix: Always prompt if multiple MFA methods are running (#47114)

2024-10-03 19:04:17 +00:00

windows

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

access_request_test.go

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

access_test.go

…

access.go

Replace more Logrus usage with Slog (#46757)

2024-09-19 18:37:51 +00:00

accountrecovery_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

accountrecovery.go

Replace more Logrus usage with Slog (#46757)

2024-09-19 18:37:51 +00:00

apiserver_test.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

apiserver.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

auth_login_test.go

Headless authn support for split SSH/TLS keys (#45646)

2024-08-22 15:38:22 +00:00

auth_test.go

Sanitize SSH server hostnames (#48988)

2024-11-15 19:04:45 +00:00

auth_with_roles_okta_rbac_test.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

auth_with_roles_test.go

Exposes Identity Center accounts as Apps in Unified Resource Cache (#49301)

2024-12-05 12:23:56 +00:00

auth_with_roles.go

Exposes Identity Center accounts as Apps in Unified Resource Cache (#49301)

2024-12-05 12:23:56 +00:00

auth.go

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

aws_certs.go

…

azure_certs_test.go

…

azure_certs.go

…

bot_test.go

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

bot.go

resolve minor TODOs (#47777)

2024-10-22 17:46:00 +00:00

client_tls_config_generator.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

db_test.go

fix(auth): return db client CA when generating sql server certificates (#48772)

2024-11-13 17:48:43 +00:00

db.go

fix(auth): return db client CA when generating sql server certificates (#48772)

2024-11-13 17:48:43 +00:00

desktop_test.go

Surface Cloud Entitlements (#42394)

2024-06-28 00:22:13 +00:00

desktop.go

Improve troubleshooting for LDAP authentication errors (#42948)

2024-10-16 18:51:26 +00:00

externalauditstorage.go

…

fuzz_test.go

…

github_test.go

support split SSH/TLS keys in SSO login endpoints (#45876)

2024-09-04 19:07:57 +00:00

github.go

Convert github auth code to use x/oauth2 (#48598)

2024-11-18 14:49:30 +00:00

grpcserver_test.go

Add TargetPort to RouteToApp & use it to route connections to multi-port TCP apps (#49047)

2024-12-03 13:55:00 +00:00

grpcserver.go

GitHub Proxy part 2: git_server resource, service, and RBAC (#49393)

2024-11-27 16:12:30 +00:00

helpers_mfa.go

Remove SolveAuthenticateChallenge from MFA Ceremony in favor of PromptConstructor (#47650)

2024-10-21 18:38:50 +00:00

helpers.go

GitHub proxy part 2.5: git_server cache (#49564)

2024-12-05 03:18:50 +00:00

init_test.go

set default algorithm suite when other auth pref fields are set (#47820)

2024-10-24 21:13:16 +00:00

init.go

Revert "Remove 2FA bypass (#47288)" (#49671)

2024-12-03 13:53:10 +00:00

join_azure_test.go

Azure join method - Use attested data subscription id (#48707)

2024-11-18 20:03:22 +00:00

join_azure.go

Azure join method - Use attested data subscription id (#48707)

2024-11-18 20:03:22 +00:00

join_bitbucket_test.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

join_bitbucket.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

join_circleci_test.go

…

join_circleci.go

…

join_ec2_test.go

…

join_ec2.go

…

join_gcp_test.go

…

join_gcp.go

…

join_github_test.go

Support for joining Actions in un-reachable GitHub Enterprise Servers via Static JWKS (#48973)

2024-11-15 12:32:55 +00:00

join_github.go

Support for joining Actions in un-reachable GitHub Enterprise Servers via Static JWKS (#48973)

2024-11-15 12:32:55 +00:00

join_gitlab_test.go

…

join_gitlab.go

…

join_iam_test.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_iam.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_kubernetes_test.go

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

join_kubernetes.go

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

join_spacelift_test.go

…

join_spacelift.go

…

join_terraformcloud_test.go

Enable Terraform Cloud joining for Teleport Community Edition (#46419)

2024-09-12 02:37:41 +00:00

join_terraformcloud.go

Enable Terraform Cloud joining for Teleport Community Edition (#46419)

2024-09-12 02:37:41 +00:00

join_test.go

Update backend.Key to be its own distinct type (#46701)

2024-10-04 14:02:00 +00:00

join_tpm_test.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_tpm.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

kube_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

kube.go

[kube] Drop usage of ProcessKubeCSR (#46779)

2024-09-20 09:56:04 +00:00

methods_test.go

…

methods.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

middleware_test.go

Make rejected connections easier to identify (#45176)

2024-08-08 17:46:31 +00:00

middleware.go

lib/limiter: remove the Oxy rate limiter (#47257)

2024-10-10 22:32:52 +00:00

moderated_sessions_test.go

…

notification_test.go

make access request notifications expire alongside the request (#42527)

2024-06-06 22:58:11 +00:00

oidc.go

feat: SSO MFA - SSO MFA challenge creation and verification (#47684)

2024-10-24 20:12:59 +00:00

password_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

password.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

periodic_test.go

…

periodic.go

…

register.go

chore: update IAM join method to use aws-sdk-go-v2 (#47044)

2024-10-02 00:58:00 +00:00

rotate.go

Get rid of internal reloads (#44882)

2024-09-11 21:13:09 +00:00

saml.go

feat: SSO MFA - SSO MFA challenge creation and verification (#47684)

2024-10-24 20:12:59 +00:00

server_info_test.go

Add retry logic to server info reconciler (#47160)

2024-10-10 16:25:47 +00:00

server_info.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

server_monitor.go

Add monitoring of the servers time drifting (#44489)

2024-11-28 21:18:24 +00:00

session_access_test.go

…

session_access.go

Fix incorrect usages of "it's" (#48252)

2024-10-31 23:35:30 +00:00

sessions_test.go

Test DeviceWebToken creation from CreateWebSessionFromReq (#44818)

2024-07-30 19:34:15 +00:00

sessions.go

Add TargetPort to RouteToApp & use it to route connections to multi-port TCP apps (#49047)

2024-12-03 13:55:00 +00:00

sso_diag_context_test.go

…

sso_diag_context.go

…

sso_mfa_test.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

sso_mfa.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

tls_test.go

fix: Update types for TestAuthServerConfig (#49194)

2024-11-22 18:25:34 +00:00

transport_credentials_test.go

Update google.golang.org/grpc to 1.68.0 (#49712)

2024-12-03 19:05:35 +00:00

transport_credentials.go

Fix gRPC connections being disconnected regardless of DisconnectCertExpiry (#43270)

2024-06-20 14:48:38 +00:00

trustedcluster_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

trustedcluster.go

upsert trusted cluster cleanup (#48176)

2024-11-05 22:15:50 +00:00

usage_test.go

Surface Cloud Entitlements (#42394)

2024-06-28 00:22:13 +00:00

user.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

usertoken_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

usertoken.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

version.go

Remove version constraint for v18 (#48783)

2024-12-04 06:25:53 +00:00